Static task
static1
Behavioral task
behavioral1
Sample
fa1394de92a9d5b2bc7de848567b5e49f944130a39a143cb89852d49a22826f5.exe
Resource
win7-20240221-en
General
-
Target
fa1394de92a9d5b2bc7de848567b5e49f944130a39a143cb89852d49a22826f5
-
Size
61KB
-
MD5
43ee6b4f87120bdf90a2d6cdc92fb0c1
-
SHA1
e1e6a4559aa489f64dbf14701523b569b1cde36c
-
SHA256
fa1394de92a9d5b2bc7de848567b5e49f944130a39a143cb89852d49a22826f5
-
SHA512
b25a62afe90e7669eadd885c8a28206118aef99a83a8767fe538f35e0db1af3819afccf5aca71efcf9ad44894f469b22d42e38ad8a906440be136756d4fc56a6
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIug6bL6U:ymb3NkkiQ3mdBjFIugpU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa1394de92a9d5b2bc7de848567b5e49f944130a39a143cb89852d49a22826f5
Files
-
fa1394de92a9d5b2bc7de848567b5e49f944130a39a143cb89852d49a22826f5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ